[PLUG] resnet web server monitoring

[Jeff DeFouw]

On 4 Sep 1999, Miguel Lopez wrote:

> fellow PLUGers,
> 
> This message is directed to those running a web server on the resnet network.
> 
> Has anyone noticed that everday around 5 AM, there is a http request from:
> 
> xnet-mgt.resnet.purdue.edu
> 
> What is this?

I run a web server (with the default post-installation document) on
resnet, but I have not seen any request like that.  I have one visit from
another resnet computer looking at the post-installation document, I have
a header/version check from netcraft.com, and I have an attempted attack
of the very ancient cgi-bin/phf.cgi script from some dynamic PPP IP in
apc.org.  Nothing from xnet-mgt.  They're just out to get you. :)

--
Jeff DeFouw <defouwj@purdue.edu>